In light of the recent scare around Google, Yahoo, and Microsoft credentials, I believe this article from the team at SANS Securing the Human is good content and definitely worth a share. Enjoy!
http://securingthehuman.sans.org/newsletters/ouch/issues/OUCH-201509_en.pdf
